Browse by Tags

Security Techniques, Building Codes, and Approach
When you're improving the security of a system, I find it's helpful to think in terms of the techniques you use, the "building codes" you follow, and the overall life cycle approach you use. While there's a lot to know about security engineering, here's Read More...
How To Use Guidance Explorer to do a Security Code Inspection
One of the key experiences you get with Guidance Explorer (GE) is support for manual security inspections. We call them inspections versus reviews because we inspect against specific criteria. We supply you with a starter set of inspection questions, Read More...
Security Inspections
Inspections are among my favorite tools for improving security. I like them because they’re so effective and efficient. Here’s why: If you know what to look for, you have a better chance of finding it. (The reverse is also true: if you don’t know what Read More...
Inspections
Inspections are a white-box technique to proactively check against specific criteria. You can integrate inspections as part of your testing process at key stages, such as design, implementation and deployment. Design Inspections In a design inspection, Read More...

Search

Go

This Blog

Syndication

Page view tracker